Recent threat research reveals a severe security crisis affecting low-cost IP-KVM devices. Security experts discovered nine vulnerabilities across four popular vendors, transforming these cheap management tools into powerful attack platforms. Compromising a single KVM device grants an attacker complete physical-level control over every connected machine. This means attackers gain direct keyboard, video, and mouse control […]

The post $30 IP-KVM Flaws Could Enable BIOS-Level Enterprise Network Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The ongoing supply chain attack targeting Aqua Security’s Trivy ecosystem has escalated, with new compromised Docker images discovered on Docker Hub. According to Socket’s analysis, two new Docker image tags, 0.69.5 and 0.69.6, were published on March 22 without corresponding GitHub releases or version tags. This discrepancy immediately raised concerns about unauthorized publishing activity. Both […]

The post Trivy Supply Chain Attack Spreads via Compromised Docker Hub Images appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A highly automated npm supply chain campaign, dubbed “CanisterWorm,” in which threat actors steal npm access tokens and weaponize legitimate publisher accounts at scale. The group, tracked as “TeamPCP,” has compromised trusted namespaces including @emilgroup and @teale.io, pushing new SDK versions that silently deploy a persistent backdoor and then self-spread across every package the victim […]

The post CanisterWorm Hijacks npm Publisher Accounts, Steals Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.